The problem is also one of credibility, Bitcoin was supposed to be private and breaching privacy has proved to be pretty trivial. Encryption is hard, but maintaining anonymity is much harder.
Theory vs. practice. When there's a DoJ case with a web that's all unified through Monero, then you have proof Monero has been busted.
Monero hasn't been busted.
From the paper - "Our techniques show that Monero is not necessarily a dead end for investigators."
And then offers zero evidence to demonstrate that investigators were able to use anything from the seizures.
This is not evidence - "They (mistakenly?) advised their hopeful subscribers to publish their email addresses (hexencoded, but publicly visible) in the Monero blockchain, leading to these transactions being identified" [31]
That paper is from 2018. I expect they've been remediated by now, though everything is going to be vulnerable at some point in some way. What matters is for how long.